AI Prompt Injection Vulnerability

ServiceNow's Now Assist generative AI platform is susceptible to "second-order prompt injection" attacks due to its default agent-to-agent discovery configurations. This allows malicious actors to manipulate benign agents into recruiting more powerful ones, facilitating unauthorized actions like data exfiltration, record modification, and privilege escalation, often undetected.

What Happened

ServiceNow's Now Assist generative AI platform is susceptible to "second-order prompt injection" attacks due to its default agent-to-agent discovery configurations. This allows malicious actors to manipulate benign agents into recruiting more powerful ones, facilitating unauthorized actions like data exfiltration, record modification, and privilege escalation, often undetected.

Why This Matters

The evidence matters to defenders using the affected technology because it could allow an attacker to gain additional privileges.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Nov 19, 2025 05:30

  BugSkan first recorded this incident.

• ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts - The Hacker News
  Nov 19, 2025 05:30

  thehackernews.com · Research

Sources

My AI Stack Match